Privacy Policy

1. Introduction

Onnixx (“we”, “us”, “our”) operates the Onnixx platform at onnixx.com. This Privacy Policy describes how we collect, use, and protect your personal information when you use our AI-powered digital business card service.

By accessing or using Onnixx, you agree to the collection and use of information as described in this policy. If you do not agree, please discontinue use of the service.

2. Information We Collect

Account Information

When you create an account, we collect your name, email address, and password. If you sign in with Google OAuth, we receive your Google profile information (name, email, and profile picture).

Business Card Data

To build your digital business card, we collect information you provide, including:

• Name, job title, and company name
• Phone number and email address
• Social media links and website URLs
• Profile photos and custom images

AI & Biometric Data

Our AI features require specialized data. This may include:

• Facial images — uploaded for AI avatar video generation
• Voice recordings — uploaded for voice cloning and text-to-speech synthesis
• Text scripts — submitted for AI-powered script rewriting

Payment Information

Payment transactions are processed securely by Stripe. We do not store your credit card numbers, CVV codes, or full payment details on our servers. Stripe handles all sensitive payment data in accordance with PCI DSS standards.

Automatically Collected Information

When you use Onnixx, we may automatically collect:

• IP address and approximate location
• Browser type and version
• Device information and operating system
• Usage patterns and feature interactions
• Authentication cookies (see Section 7)

3. How We Use Your Information

We use the information we collect for the following purposes:

• Provide, operate, and maintain the Onnixx platform
• Process AI avatar generation and voice synthesis requests
• Process subscription payments and manage your account
• Communicate with you about service updates and support
• Improve and optimize the user experience
• Ensure the security and integrity of our platform
• Comply with legal obligations and enforce our terms

4. AI-Specific Disclosures

Onnixx uses third-party AI services to power its core features. This section explains how your data is handled by each provider.

Avatar Generation (D-ID)

Facial images you upload are sent to D-ID for AI avatar video creation. Your images are processed on D-ID's servers and are subject to D-ID's Privacy Policy.

Voice Cloning (ElevenLabs)

Voice recordings you upload are sent to ElevenLabs for voice synthesis and cloning. Your biometric voice data is processed in accordance with ElevenLabs' Privacy Policy.

Script Rewriting (OpenAI)

Text scripts you submit are sent to OpenAI for AI-powered rewriting and enhancement. Your content is processed in accordance with OpenAI's Data Usage Policy.

Important Notices

• We do NOT use your biometric data to train AI models. Your facial images and voice recordings are used solely to generate your requested content.
• Consent for third-party likeness: You must have proper consent before uploading someone else's likeness or voice. You are solely responsible for obtaining the necessary permissions.

5. How We Share Your Information

We share your information only with the service providers necessary to operate Onnixx:

We do not sell your personal information. We do not share your data with advertisers or data brokers.

6. Data Retention

We retain your account data for as long as your account is active. If you close your account, we will delete your personal information within a reasonable timeframe.

AI-generated content (avatar videos, synthesized audio) is stored in your account until you choose to delete it. You may request deletion of your account and all associated data at any time.

Certain data may be retained longer if required by law or necessary to resolve disputes and enforce our agreements.

7. Cookies and Tracking

Onnixx uses a minimal cookie approach:

• Session cookie (__session): A secure, httpOnly authentication cookie used to maintain your login session. This is essential for the service to function.
• No third-party tracking cookies: We do not use advertising or analytics tracking cookies.
• No advertising cookies: We do not serve ads or share cookie data with ad networks.

8. Data Security

We take the security of your data seriously. Our measures include:

• Encrypted authentication cookies (httpOnly, secure, SameSite)
• Server-side API key storage — keys are never exposed to the client
• Secure HTTPS connections for all data transmission
• Firebase security rules to restrict database and storage access
• Regular security reviews and updates

While we strive to protect your information, no method of electronic transmission or storage is 100% secure. We cannot guarantee absolute security.

9. Your Privacy Rights

GDPR Rights (European Economic Area)

If you are located in the EEA, you have the right to:

• Access — request a copy of your personal data
• Rectify — correct inaccurate or incomplete data
• Erase — request deletion of your personal data
• Restrict — limit how we process your data
• Portability — receive your data in a portable format
• Object — object to processing based on legitimate interests

CCPA Rights (California Residents)

If you are a California resident, you have the right to:

• Know — learn what personal information we collect and why
• Delete — request deletion of your personal information
• Opt-out of sale — we do not sell personal information
• Non-discrimination — exercise your rights without penalty

How to Exercise Your Rights

To exercise any of these rights, please contact us at privacy@onnixx.com. We will respond to your request within 30 days.

10. International Data Transfers

Your data is processed in the United States via Firebase / Google Cloud infrastructure. Third-party AI services (D-ID, ElevenLabs, OpenAI) may process data in various jurisdictions.

By using Onnixx, you consent to the transfer of your data to the United States and other countries where our service providers operate. These transfers are necessary to provide the service.

11. Children's Privacy

Onnixx is not intended for users under the age of 16. We do not knowingly collect personal information from children under 16.

AI features — especially voice cloning and avatar generation — require users to be at least 18 years old. If we learn that we have collected data from a child, we will delete it promptly.

12. Third-Party Links

Your digital business card may contain links to external websites and social media profiles. We are not responsible for the privacy practices or content of those third-party sites.

We encourage you to review the privacy policies of any external site you visit through links on your card.

13. Changes to This Policy

We may update this Privacy Policy from time to time. When we make material changes, we will notify you via email or an in-app notice.

Your continued use of Onnixx after changes are posted constitutes acceptance of the updated policy. We encourage you to review this page periodically.

14. Contact Information

If you have questions or concerns about this Privacy Policy, please contact us at:

privacy@onnixx.com